Terms of Service

By accessing or using DPDPA Shield, you agree to be bound by these Terms and our Privacy Policy. If you are accepting on behalf of a company or other legal entity, you represent and warrant that you have the authority to bind that entity to these Terms.

If you do not agree to these Terms, do not use DPDPA Shield.

DPDPA Shield provides a DPDPA compliance management platform as a Software-as-a-Service product. The platform includes tools for consent management, rights request processing, breach incident management, compliance health monitoring, data inventory, policy management, and related features.

Important: DPDPA Shield provides tools to assist with compliance. You remain the Data Fiduciary responsible for your organisation's compliance under DPDPA 2023. Use of DPDPA Shield does not guarantee regulatory compliance, and we are not your legal counsel.

Access to DPDPA Shield is provided by invitation or through a demo request. You must provide accurate, current, and complete information when registering. You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account.

Notify us immediately at hello@dpdpashield.in if you suspect unauthorised access to your account.

You may not:

• Use DPDPA Shield for any unlawful purpose or in violation of any applicable law
• Reverse-engineer, decompile, or disassemble any part of the platform
• Resell, sublicense, or distribute access to DPDPA Shield without a written reseller agreement
• Circumvent plan limits or access controls through technical means
• Upload malicious code, conduct security attacks, or attempt to gain unauthorised access
• Use the platform to process personal data for purposes unrelated to DPDPA compliance

DPDPA Shield is offered on monthly or annual subscription plans. Subscriptions auto-renew at the end of each billing period unless cancelled before the renewal date.

Cancellation takes effect at the end of the current billing period. We do not offer refunds for partial months or unused portions of annual subscriptions. Price changes will be notified at least 30 days in advance via email.

You own your data. We process your tenant data only as instructed and in accordance with our Data Processing Agreement and Privacy Policy.

On account deletion or subscription termination, your data will be purged within 30 days, subject to any retention obligations under applicable law.

DPDPA Shield, its software, user interface, documentation, and all associated intellectual property belong to us. Your use of the platform does not grant you any ownership rights.

You retain ownership of all data, configurations, and content you upload to DPDPA Shield. You grant us a limited licence to process that data solely to provide the services described in these Terms.

We may use anonymised, aggregated usage data (with no personally identifiable information) for product improvement and benchmarking purposes.

We target 99.5% monthly uptime for the DPDPA Shield platform. Planned maintenance windows will be communicated at least 48 hours in advance via email or in-app notification.

We are not liable for downtime or service degradation caused by third-party infrastructure providers (Vercel, Render, Supabase, Cloudflare) or events beyond our reasonable control.

To the maximum extent permitted by applicable Indian law:

• Our total aggregate liability for any claim arising under or related to these Terms is capped at the fees you paid to us in the three months immediately preceding the claim
• We are not liable for any indirect, consequential, special, incidental, or punitive damages, including loss of profits, data, or goodwill
• We make no warranty that DPDPA Shield will be error-free, uninterrupted, or that it will meet your specific legal or regulatory requirements

Either party may terminate the subscription at any time. We may suspend or terminate your account for material breach of these Terms, with notice where practicable. For serious violations (e.g. security attacks, fraud), we may terminate immediately without notice.

On termination, your access to the platform ceases. Your data will be retained for 30 days to allow export, then deleted.

These Terms are governed by and construed in accordance with the laws of India. Any dispute arising under or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts in [City, India].

We may update these Terms from time to time. Material changes will be notified at least 30 days in advance via email. Continued use of the platform after the effective date constitutes acceptance of the updated Terms.

Questions about these Terms: hello@dpdpashield.in